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PROGRAMMING OF WIRELESS TELEPHONES 



BACKGROUND OF THE INVENTION 

This is a continuation-in-part application of Application Serial No. 
08/968,329, filed November 12, 1997 now U.S. Patent No. 6,138,004, issued on 
October 24, 2000, which is a continuation of Application Serial No. 08/521,966, filed 
August 31, 1995, now abandoned. 

This invention relates to a secure interlink receiver for programming 
wireless telephones wherein the interlink receiver interconnects a wireless 
telephone with a remote central processor for secure assignment of the necessary 
phone number and parameters for immediate use of the telephone by a customer 
with a designated service provider. 

The use of an interlink receiver for programming a telephone was first 
taught in McGregor, et al, U.S. Patent No. 5,325,418, entitled, "Cellular Phone 
Accounting System", issued June 28, 1995. In that patent, phones received from 
different manufacturers are programmed for use in a controlled environment. 
For example, in the situation where phones are programmed and activated for 
governmental use or organizational use in private companies, strict control over 
the programming procedure is maintained. Similarly, in the rental 
environment, the phones are programmed and tracked by the organization 
renting the phones enabling close operational control over the temporary use of 
the phone by a rental customer. 

Although it was suggested that the procedures for programming, tracking 
and accounting described in the referenced patent could be incorporated into 



central telephone systems, questions of security as well as inertia were predicted 
to inhibit broad application. 

Additionally, where gang programming of multiple phones by 
manufacturers or service providers occurs, security can be controlled. A system 
for programming cellular phones in an interlink receiver with a gang platform is 
described in the continuation-in-part application of McGregor, et al, entitled, 
"Mobile Phone with Internal Call Accounting Controls", now U.S. Patent No. 
5,625,669, issued April 29, 1997. 

The significant problem of phone security is evident by the massive losses of 
carriers and service providers. The dramatic increase in wireless 
communication in the form of cellular telephone systems, cordless personal 
communication service devices, radio phones and other digital and analog 
systems that communicate over the airwaves has magnified the vulnerability to 
fraud. Frequency scanners and other interception devices have allowed access 
not only to the content of communications, but to the electronic serial numbers 
and access codes of the callers. Clone phones, that imitate a legitimate 
subscriber's phone, are fraudulently programmed to duplicate the codes of the 
legitimate phone and enable the user of the cloned phone to place calls that are 
billed to the authorized subscriber. Losses to wireless phone fraud are estimated 
to be in the hundreds of millions of dollars per year. 

As wireless phone distribution moves from the controlled environment of 
carriers and local service providers to general retailers, the programming and 
activation of wireless phones is accomplished remotely. Frequently, several 
entities may be involved behind the transfer of a wireless phone from the retailer 



to the user. The retailer will likely sell wireless phones from different 
manufacturers, and offer assignment of the phone to different service providers. 
The retailer may have available different credit or debit plans for payment of the 
phone and carr)dng or underwriting the service provider charges, enabling a new 
market for intermediaries. 

The availability of many of these options is described in the patent of 
McGregor, et al, U.S. Patent No. 5,577,100, entitled, "Mobil Phone with Internal 
Accounting" issued November 19, 1996. In that patent, convenient methods of 
remote programming and phone activation are described, including methods that 
can be accomplished over the airways. With the advent of this prospect, the 
question of the security of the programming procedure becomes critical. 

It is a primary object of this invention to resolve the problems of secure 
programming and activation of wireless phones where all or part of the 
programming originates from a host computer at a site remote from the phone 
being programmed. While the description of the invention is primarily directed to 
the use of the more secure line connection between the interlink receiver and the 
host computer to minimize unauthorized intrusion, the interlink receiver system 
is designed to communicate in encrjrpted messages to enable the dialog for remote 
programming to be accomplished via a wireless communication path. In certain 
areas of the world, the existing hardwire infrastructure is nonexistent or 
unreliable. Remote programming and activation over the airways is therefore a 
necessity. 

The object of this invention is to provide a device and process that 
maximizes the ability to remotely program a wireless phone in a secure manner. 



SUMMARY OF THE INVENTION 

This invention relates to a device and process for secure remote 
programming of wireless phones. 

Programming of phones from a remote host computer may be required for 
a number of reasons. In U.S. Patent No. 5,325,418, a system for remotely 
programming wireless phones was described for the primary purpose of central 
accounting. Programming of cellular telephones in the rental environment 
includes initial programming and activation of new phones added to the rental 
inventory, and the reprogramming of rental phones that are returned to different 
rented sites and added to the return site inventory. 

In other situations, programming of wireless phones from a remote host is 
desired to coordinate the allocation of assignable phone numbers. For example, 
the service provider may have a block of MIN's (mobile identification numbers) 
that must be assigned to new phones before they can be activated. If there is a 
number of distribution outlets, centralizing this resource allows assignment to be 
made in accordance with inventory movement at each site. 

As programming and activation of the mobile phone moves away from the 
control of the manufacturer, carrier or service provider, security becomes more 
difficult to implement. It has been suggested that remote programming can be 
performed with a conventional personal computer and a modem with the wireless 
phone directly connected to the serial port of the computer via a cable. Because a 
personal computer is effectively an open system, security is virtually impossible to 
implement, where security is to extend to the programmer. However, where 
there is interposed an interlink receiver between the host computer and the 



telephone unit as disclosed in the referenced patent, hardware and software can 
be implemented that effectively codes certain features of the programming 
sequence that is even secure from the technician programming the phone. 

The interlink receiver of this invention is designed to include a secure 
encoding and encryption chip that permits certain security codes to be entered 
into a mobile phone without access by the programmer and without certain keys 
entering the communication dialogue between the host computer and the 
interlink receiver. 

The interlink receiver of this invention is designed with an internal modem 
to allow the interlink receiver to directly connect to a phone line terminal for 
station to station connection with a remote host computer. The interlink receiver 
includes a small microprocessor and updatable memory to perform the 
procedural tasks of communicating with the host computer and the installed 
phone unit, and allowing data entry via a small keyboard and feedback with the 
technician, via a small display. 

The secure interlink receiver has its own identification number and 
includes an internal routine for encrypting communications with the host 
computer. The interlink receiver is designed to enter a secret authentication key 
into the phone unit in a tamper-proof manner enabling the phone unit to generate 
shared secret data with the carrier or system provider. The authentication key or 
A-key is a 64 bit code assigned to the permanent security and identification 
memory of the mobile phone unit. The assigned code is known only to the home 
location register or authentication center, and does not change as the mobile unit 
roams from one zone to another. As detailed in the TIA/EIA Interim Standard 91 



(IS-91), the necessary caller authorization codes and communication encryption 
codes are generated using in part the A-key. In this manner, each mobile phone 
unit has a unique key from which changing authentication and encryption codes 
can be derived. Enabling authentication codes and encryption codes to change for 
a discrete mobile phone unit greatly enhances the security of the unit. Additional 
procedures and protocols for secure call placement can be added, including 
random or calculated change of authentication codes and encryption codes. 

The interlink receiver of this invention is designed to be an inexpensive, but 
secure device that can be used to remotely program and encode a mobile phone 
unit by a technician or a common sales person. The device is designed for use in 
a system with a host computer and includes the necessary terminal for 
interconnection with programmable mobile phone units of different manufacture. 

These and other features will be apparent from a consideration of the 
detailed description of the preferred embodiments. 



BREEF DESCRIPnON OF THE DRAWINGS 

Fig. 1 is a perspective view of the interlink receiver system with a 

host computer, an interlink receiver unit and a terminal, with a phone unit 
connected to the terminal. 

Fig. 2A is a diagrammatic view of the first part of a flow chart for 
encoding a phone unit. 

Fig. 2B is a diagrammatic view of the last part of the flow chart of Fig. 

2A. 

Fig. 2C is a diagrammatic view of a flow chart for a sub-routine for the 
flow chart of Figs. 2A and 2B. 

Fig. 3A is a first segment of a circuit diagram of the internal circuitry 
of the interlink receiver unit shown in Fig. 1. 

Fig. 3B is a second segment of the circuit diagram of Fig. 3A. 

Fig. 3C is a third segment of the circuit diagram of Fig. 3A. 

Fig. 3D is a fourth segment of the circuit diagram of Fig. 3A. 

Fig. 3E is a fifth segment of the circuit diagram of Fig. 3A. 

Fig. 3F is a sixth segment of the circuit diagram of Fig. 3A. 

Fig. 3G is a seventh segment of the circuit diagram of Fig. 3A. 

Fig. 4 is an alternate embodiment of the interlink receiver unit with a 

connected phone unit, the phone unit also shown in part, in phantom, detached 
from the interlink receiver unit. 



Fig. 5A is a front perspective view of an alternate embodiment of the 
interlink receiver unit with a phone unit. 

Fig. 5B is a back perspective view of the interlink receiver unit 
electronically connected to the phone unit. 

ni^An FTI DESCRDPnON OF THE PREFRBRF D EMBODIMENTS 

Referring to Fig. 1, the interlink receiver system is shown, and designated 
generally by the reference numeral 10. The system 10 includes a remote host 
computer 12, an interlink receiver unit 14 and an interconnection terminal 16. In 
operation, the interlink receiver system 10 connects to a programmable mobile 
phone unit 18, shown connected to the interconnection terminal 16 of the interlink 
receiver unit 14. 

The host computer 12 is any type of computer or computer system server 
having at least the power of a conventional personal computer. In the example 
shown, the host computer 12 has a monitor 20, a keyboard 22 and a central 
processing imit 24, The host computer 12 includes a conventional internal 
modem 23 in the central processing unit 24, with a phone cord 25 and a terminal 
connector 26 connected to a conventional phone line 27. 

Similarly, the interlink receiver unit 14 has an internal microprocessor 
and modem (not visible) with a phone cord 30 having a terminal connector 32 that 
connects to a conventional switched telephone line 34. During operation, the 
interlink receiver unit 14 is connected via modem to the host computer 12 through 
common carrier telephone lines. The interlink receiver unit 14 is fabricated with 
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a secure housing 36, a touch-pad keyboard 38 and a small back-lit, LCD display 
screen 40. 

In Fig. 1, the interlink receiver unit 14 is shown connected to the mobile 
phone unit 32, here a typical cellular telephone 42. The keyboard 38 and display 
screen 40 of the interlink receiver xinit 14 are sufficient to display alpha-numeric 
characters 44, enabling brief messages and codes to be conveyed to the party 
programming the phone unit 42. The interlink receiver unit 14 is designed to 
carry on a dialogue and data exchange with the host computer via modem and the 
technician or party programming the phone unit 42 via the display screen 40 and 
keyboard 38. The interlink receiver unit 14 communicates with the mobile phone 
unit 18 in the Fig. 1 embodiment via a cable 41 connected to a 25 pin DB-25 data 
port (not visible) at the back of the interlink receiver unit 14 and to the 
interconnection terminal 16 compatible with the mobile phone unit being 
programmed. Substitute cables having an interconnection terminal compatible 
with each manufacturer's phone unit are provided for programming phone units 
from different manufacturers. The interlink receiver unit 12 has a conventional 
power socket (not visible) for a power transformer cord unit 46 that connects to a 
customary power source for powering the interlink receiver unit 14 and a 
connected phone unit 18 at low d.c. voltage when power switch 48 is turned on. 
The interlink receiver unit 14 includes its own code kernal identical or similar to 
the A-key for authentication of the individual interlink receiver unit and for 
encrypted communication with the host computer. 

The interlink receiver unit 14 is designed for operation at different levels of 
security, depending on the requirements of the organization programming the 



phone units. The following sequence of operation is designed to provide moderate 
security. Implementation of the higher levels of security will be discussed in 
conjunction with the circuit diagram of Fig. 3 and the alternate embodiments of 
Figs. 4, 5A and 5B. 

Referring now to Fig. 2A, a portion of a flow chart depicting the mode of 
operation of the interlink receiver system 10 is shown. The host computer 12 has 
a computer program for controlling their encoding operation with the interlink 
receiver unit 14. The interlink receiver unit has at least an input and output 
electronics operable with a small microprocessor for exchanging data with the 
host computer and executing the encoding commands of the host computer 12. In 
the alternate embodiment of Fig. 4, the interlink receiver unit includes a 
computer program for programming and encoding a connected wireless phone 
unit under a reduced command set from the host computer 12. 

From an initial start box 50, the interlink receiver unit 14 is turned on with 
power switch 48 and the unit is powered up in sequence box 52. The sequence 
from power up box 52 proceeds to a sleep mode at box 54 where the interlink 
receiver unit 14 awaits activity in the form of any key press to prompt the device 
into activity. When prompted, the device proceeds to decision diamond 56. If the 
phone unit 18 is not electronically connected via the data bus cable 41 to the 
receiver unit 14, the display screen is prompted at box 55 to display "PHONE 
CONNECTED?". The sequence proceeds to decision diamond 57, where a "TIME 
OUT?" prompt is displayed. If the response is yes, the sequence moves to restart 
box 59 which loops to initiation box 69. If no, the sequence proceeds to decision 
diamond 61 to determine if a phone unit is not connected. If yes, the sequence 
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proceeds to diamond 58. If no, the sequence loops back to diamond 57. If the 
receiver unit is connected, the system proceeds to obtain the access code of the 
user of the interhnk receiver unit 14 before proceeding. The procedure requires 
that a user authorization code be entered via the keyboard to insure that only 
authorized personnel are using the interlink receiver unit 14. When the correct 
access code is entered, the interlink receiver unit 14 dials the host computer 12 at 
diamond 60. When an invalid access code is entered, the LCD displays, 
"INVALID ENTRT' at box 62 and proceeds to a pause at box 64 allowing reentry of 
a proper access code before shut down at box 66 that loops to restart box 69 for re- 
initiation of the procedure. If after dialing at diamond box 60 with the prompt 
"DIALING" displayed, no connection is made, the display screen displays "NO 
RESPONSE" at box 68, pauses at box 70 and initiates a restart at box 72 that loops 
back to re-initiation box 69. If the dialing is successful and a connect is made, the 
interlink receiver imit 14 displays "PROCESSING" at box 74 and proceeds to the 
connect box 76 in Fig. 2B. 

From the processing box 74 after connection of the interlink receiver unit 14 
with the host computer 12, the interlink receiver unit 14 communicates with the 
phone unit 32 to obtain the access codes from the interlink receiver unit 14 and the 
phone data from the phone unit 18 in diamond 77. The access authentication sub- 
routine is discussed with relation to Fig, 20 hereinafter. 

If the phone unit 12 responds with inadequate data, the dialogue box 78 
inquires whether the phone unit is to be programmed and this message is 
displayed in the display screen 40. Ordinarily, the phone unit has been 
preprogrammed with at least the electronic serial number (ESN) and only the 

11 



mobile identification number, and in certain instances the site identification 
number (SID) needs to be added to the phone unit. This is handled in a sub- 
routine box 80 where the number assignment module (NAM) is activated and the 
phone unit 18 is programmed by the host computer 12 or by the interlink receiver 
unit as discussed with relation to Fig. 4. The programming is accomplished in 
the same manner as described in the reference specifications. If the response is 
"NO", then the decision diamond 78 leads to the restart box 82 which disconnects 
the communication line with the host computer and loops to initiation box 69, If 
the phone unit 42 has both an ESN and a MIN. initially or after programming, the 
phone data, including at least the ESN and MIN, is sent to the host computer at 
box 84. The host computer returns the A-key and checks the communication 
circuit at diamond 86. It is to be understood that the A-key transmitted is 
transmitted in encrypted form, or , alternately as described hereinafter is a coded 
command to the interlink receiver as described with reference to Fig. 4 to generate 
the A-key from secret data shared by the host computer and by the interlink 
receiver on fabrication or servicing. 

If there is a problem with the connection, the display screen 40 reads "NO 
RESPONSE", and after a pause the interlink receiver unit sequences to restart at 
box 90 which loops to box 69. If there is no problem with the connection, the 
process proceeds to displaying "PROCESSING" at box 92 as the code for the A-key 
or for generating the A-key is transferred to the security module in the phone 18. 
It is to be understood that certain phone manufactures will prefer to internally 
generate the A-key from an encryption chip or circuit within the phone unit. In 
these instances, the activation command together with any code data is passed to 

12 



the phone unit 18 for internal generation of the A-key . 

During the procedure of processing, the display message "PROCESSING" 
at box 94 is displayed. Once the A-key is programmed into the phone, the 
interUnk receiver unit 14 displays the message "A-KEY PROGRAMMED" at box 
98. Unless further tasks need to be accomplished, the system pauses at box 100 
and enters restart mode at box 102 that loops the sequence back to box 69. 

When the interlink receiver 14 connects to the host computer 12 at box 76, 
the sub-routine at box 104 is simultaneously initiated to authenticate both the 
interlink receiver unit 12 and the user. Referring to Fig. 2C, the sub-routine 104 
includes a command to get access code at box 106 that prompts the interlink 
receiver unit 14 to display "ACCESS CODE?" at box 108 and awaits entry of the 
access code at diamond 110. As the user enters his or her access code, the 
numbers are added to a buffer 112 and the display screen is prompted to display a 
series of stars until the routine loops through enough entries to fill the buffer 
indicated at diamond 116 whereupon the access code number is compared to a 
stored number and access is granted or denied at decision tree 118. The same 
sub-routine is followed at decision diamond 58. Concurrently at box 106, the 
authentication code for the interlink receiver unit 12 is automatically transferred 
in encrypted form to the host computer to authenticate that a legitimate interlink 
receiver unit 12 is being connected to the host computer for exchange of coded 
data. 

Referring now to Fig. 3, the minimum circuitry required for operating the 
interlink receiver unit 12 is shown in diagrammatic form. A small 
microprocessor 130 controls the operations within the interlink receiver unit 14 
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and connects to a latch chip 132 and a Duart dual serial port chip 134 for 
connection to the internal modem 136 and the phone unit 18. The microprocessor 
chip 130 is also connected to the keypad 138 via selector 140 and to LCD 142. The 
circuit includes the necessary power circuit 144 and clock circuit 146 and 148 for 
coordinating operations for both the connected mobile phone unit 18 and modem 
136 that connects the interlink receiver unit 14 to the host computer 12. In this 
configuration, the interlink receiver operates as a controller and allows most of 
the programming functions to be initiated by the host computer 12 in 
communication with the phone unit 18. 

Referring now to Fig. 4, an alternate embodiment of the interlink receiver 
unit is shown. The interlink receiver unit is designated generally by the reference 
numeral 160 and is constructed in a similar manner to that shown in Fig. 1. A 
housing 162 includes a keyboard 164 and an LCD 166. A wireless phone unit 168 is 
coupled to an adaptor connector 170 for connecting the data port of the phone unit 
with the standard 25 pin receptacle (not visible) of the interlink receiver unit 16 
which is mounted at the bottom of a well 172. This eliminates a cable connection 
between interlink receiver 160 and the phone unit 168 for added security. By this 
direct connection, which can be shielded in the well 172, interception of the 
communication between the interlink receiver and the phone unit is minimized. 
Additionally, impedance sensitive detection circuitry and protective measures can 
be taken in the circuitry of the interlink receiver unit 160 or in the routing 
circuitry of the adapter connector 170, to maximize security. The adaptor 
connector 170 is constructed in a variety of configurations to couple the unique 
programming terminal of a particular phone unit with the pin receptacle of the 
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interlink receiver unit. 

The interlink receiver 160 is designed as an independent unit and includes 
its own internal battery power pack 174 that slides in adjacent the power switch 
176 on the side of the housing 162. Internally, the interlink receiver unit 160 is 
similar to the unit of Fig. 1 with the addition of a replaceable read only memory 
178 and a random access memory 180 connected to the microprocessor 130. The 
microprocessor 130 is required to be slightly more powerful than used for the 
interhnk receiver unit 14 of Fig. 1 to handle the programming and memory 
functions described, and may be similar to the microprocessors used in 
programmable phone units. The random access memory 180 stores the necessary 
programming for programming phones and operationally assigning the A-key to 
the phone unit when prompted by the host computer. The read only memory 178 
is in the form of a sealed, replaceable chip that stores a series of A-keys or part of 
the code necessary to generate the keys. 

With the phone unit 168 plugged into the interlink receiver unit, the 
interlink receiver unit can activate the phone unit 18 using the ESN and 
communicate with the carrier through the radio electronics of the phone unit. 
The host computer 12 connects to a wireless communication service provider to 
communicate with the interlink receiver unit 160 over the airways. Although 
messages can be encrypted as described with relation to the embodiment of Fig. 1, 
it is common knowledge that the transmitted data can be intercepted and 
analyzed for cracking of encoded messages. The use of a destructible and 
replaceable ROM chip 178 enables data codes known to the host computer to be 
directly stored in inalterable form in the interlink receiver unit 160. This enables 
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communications between the interlink receiver unit 160 via the mobile phone unit 
168 to be accomplished in reduced instruction sets that are indecipherable, 
although widely distributed over the airways. For example, using simple coded 
command sets the host computer 12 can command the activation of programming 
of the security codes for the phone unit 18, using the programming software 
residing in the RAM 180 and codes residing in the ROM 178. The A-key can be 
coded into the phone unit using commands from the host computer 12 together 
with a completion piece of the A-key from the host computer 12 that is coupled 
with an indexed piece of the A-key stored in the ROM of the interlink receiver unit 
160. In this manner, the host computer 12 never transmits more than a part of 
the data code for the A-key to the interlink receiver unit 160, and the interlink 
receiver unit never has more than a part of the data code for the A-key, unless 
actively entering the combined pieces of the completed A-key. As only the host 
computer 12 knows the entire code, loss of the interlink receiver unit 160 will not 
jeopardize the security of the data exchange or result in a loss of a series of A- 
keys. Exhausting the available data codes available for generating A-keys will 
require the interlink receiver unit to be returned to an authorized service center 
for replacement of the secure ROM chip with a new chip. Alternately, the ROM 
chip may include an algorithm for generating an A-key known to the host 
computer under command from the host computer 12. In each case, insufficient 
data is exchanged between the host computer 12 and the interlink receiver unit 
160 to derive the A-key, even if the communications are deciphered. 

It is therefore apparent that while greater control over security may be 
apparent in systems that communicate via hardwire, there are certain regions 
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where there is no infrastructure to enable phone programming and encoding to 
be accomplished remotely except through airway communications. In such 
situations, so long as the carrier has reasonable control over the use of the 
interlink receiver, programming, encoding and activation of the phones remotely 
over the airways can be accomplished expeditiously and securely. 

By removing the programming and number assignment functions from a 
personal computer and installing them in dedicated hardware, opportunity for 
user intrusion is minimized by restricting the data to which the user has access. 
Additionally, the use of dedicated hardware enables security measures to be 
implemented in the hardware and circuitry of the dedicated hardware which 
would be impossible to implement in the open architecture of a personal 
computer. The interlink receiver unit is effectively designed as a tamper-proof 
unit that requires the cooperation of the host computer to unlock the data used for 
programming and encoding phone units. Additionally, while code data in the 
interlink receiver is secret shared data with the host computer, the host computer 
is not obliged to share its secret data with the interlink receiver except on an item 
by item basis when encoding a particular phone unit. The host computer 12 can 
therefore maintain its security independent of the loss or compromise of the 
security of the interlink receiver unit. 

In the embodiment of the interlink receiver system 10 of Fig. 4, the receiver 
unit 160 is interconnected to the phone unit 168 by the phone unit being plugged 
into the interlink receiver unit 160. It is to be understood that an equivalent 
interconnection is accomplished by plugging the interlink receiver unit into a 
phone unit. 
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Referring now to Figs. 5 A and 5B, an alternate embodiment of the interlink 
receiver system 10 is shown with a mobile phone unit 180 and an interlink 
receiver unit 182. The interlink receiver unit 182 is plugged into the mobile phone 
unit 180, as shown in Fig. 5B, The mobile phone unit 180 is in the form of a t3T)ical 
state-of-the-art telecommunication handset with a keypad 184, control keys, 186 
and a display 188. The handset 180 has an antenna 190 and is capable of 
communication with the host computer 12 over the airways using the radio 
electronics of the phone unit as described with reference to the interlink receiver 
system of Fig. 4. 

The interlink receiver unit 182 is in the form of a programmed smart card 
192 having a series of electrical contacts 194 that engage a series of compatible 
terminal contacts (not shown) in the phone unit 180. For example, in a wireless 
phone system under GSM specifications, the smart card or SIM (Subscriber 
Identification Module) card 192 includes an internal microprocessor, ROM, 
EEPROM and RAM (not visible). The microprocessor, secure ROM and RAM are 
the functional equivalent of the microprocessor 130, read only memory 178 and 
random access memory 180 of the previously described units. It is to be noted that 
the EEPROM in a standard SIM card simply adds a non-volatile memory that 
functions like a RAM, but holds code and data when the SIM card is disconnected 
from an external power source such as the phone unit 180. 

As shown in Fig. 5B, the interlink receiver unit 182 is plugged into the 
phone unit 180 by removing the battery pack 196 and seating the SIM card 192 in 
the handset with the electrical contacts 194 of the SIM card 192 in contact with the 
terminal contacts (not visible) of the phone unit 180. When the battery pack 196 is 
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replaced, the electrical interconnection provides a direct communication pathway 
between the interlink receiver vinit 182 and the phone unit 180, and between the 
coupled interlink receiver unit 182/phone unit 180 and the host computer 12 via 
the radio electronics of the phone unit 180. The SIM card 192 complies with ISO 
7816 parts 1 and 2. The phone unit, in addition to being designed for use in a GSM 
wireless communication system, complies with hardware specifications in ISO 
7816 part 3 to interconnect with the SIM card 192 and with a communication 
protocol in ISO 7816 part 4 to exchange data and code commands with the SIM 
card 192. 

With the communication of the interlink receiver unit and host computer 12 
being via the radio electronics of the phone unit, as in the Fig. 4 embodiment, the 
modem is unnecessary, particularly when the interlink receiver unit remains 
coupled to the handset during use. However, in many circumstances, the 
inclusion of a modem in the smart card is beneficial for encoding over telephone 
lines, particularly when the interlink receiver unit is preprogrammed for 
programming multiple phone units and is used by a technician and not simply by 
a party user of the phone unit in a coupled state. 

Additionally, it is to be understood that other interface standards and 
configurations are equally applicable where a programmable smart card having 
a secure ROM (or separate chip or circuit) for a security code kernal is 
connectable to a wireless handset. For example, the interconnection of the smart 
card is alternately performed by installing the card through an end or side slot. 
The format of the card is alternately in the form of a flash card or minicard. 
Where the programming procedures are not automatic and require data or code 
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entry, the keypad 184 and display 188 of the phone unit 180 are employed by the 
technician or party using the phone unit input and prompts or feedback. 

It is to be understood that the interlink receiver system using the format 
provided by a standardized smart card that is preprogrammed is the functional 
equivalent of the previously described alternatives of the interlink receiver system. 

In the patent referenced, "Mobile Phone With Internal Accounting", U.S. 
Patent No. 5,577,100, there is described a handset-contained, prepaid accounting 
program for real-time call accounting. As noted, security of the programming 
procedure is critical. Such accounting program is containable in the smart card 
or shared by the smart card and the phone unit when coupled to effect secure 
communications and transactions with a host computer of the initial 
programming entity and/or the host computer of a subsequent service provider 
during use. This added layer of security enables secure remote programming of 
the smart card and/or programming and activation of the phone unit when 
coupled with the smart card. 

As described with reference to the previously described embodiments, the 
smart card in one form is simply a secure, inexpensive carrier for application 
software of the type described in U.S. Patent No. 5,577,100 that is loaded on the 
smart card at a service center using the security of the card as an interlink 
receiver system where the programmed card is ultimately coupled to a phone 
unit. The tamper-proof, pre-existing code or coding kernal in the interlink 
receiver unit allows a means of positive identification and authentication of the 
interlink receiver unit and provides the necessary added layer of security for 
authorized exchange of data and code with the phone unit in the open 
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